Security Engineer: Identity, Endpoints & Response (Hybrid SF)

Higgsfield AI; San Francisco (CA); Hybrid; USD 165,000 - 230,000; Full time

Benefits offered by this job

Stock options

Job summary

Higgsfield AI in the San Francisco Bay Area seeks a hands-on Corporate Security Engineer to own devices, identities, and SaaS across the company. You will collaborate with Infrastructure Security to secure people, data, and access while enabling rapid, secure growth.

You will implement MDM, EDR, IdP SSO/SAML/SCIM, MFA, and conditional access, build automation with Python/PowerShell/Bash, and lead phishing simulations with cross-functional teams to reduce risk in a high-growth AI environment.

Qualifications

• Hands-on experience running MDM and EDR at fleet scale.
• Production experience running an IdP: SSO/SAML/SCIM, MFA, and conditional access.
• Enough scripting to automate repetitive parts (Python, PowerShell, or Bash).
• High agency and working English.

Responsibilities

• Own MDM across the fleet: enrollment, policy enforcement, compliance, device lifecycle.
• Run EDR/XDR: detection, triage, and response on employee devices.
• Set and maintain endpoint hardening standards with IT and Engineering.
• Own corporate identity: Entra SSO, MFA, conditional access; joiner-mover-leaver provisioning and offboarding; password management hygiene.
• Security-review new SaaS before adoption; own approved-app list; hunt shadow IT; secure collaboration stack (email, Slack, file sharing).
• Run phishing simulations and onboarding security training; partner with infrastructure security on centralized monitoring.

Skills

MDM

EDR

SSO/SAML/SCIM

MFA

Conditional access

Scripting (Python/PowerShell/Bash)

Working English

Job description

Higgsfield AI in the San Francisco Bay Area seeks a hands-on Corporate Security Engineer to own devices, identities, and SaaS across the company. You will collaborate with Infrastructure Security to secure people, data, and access while enabling rapid, secure growth.

You will implement MDM, EDR, IdP SSO/SAML/SCIM, MFA, and conditional access, build automation with Python/PowerShell/Bash, and lead phishing simulations with cross-functional teams to reduce risk in a high-growth AI environment.